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Abstract: 

A method and apparatus for verifying the integrity of devices on a target network having 
two components: a subsystem connected to the target network, and a master system, 
isolated therefrom by a secure link. The topological and hierarchical relationship of the 
of the devices to each other improves stability of the apparatus. Random testing of 
target network devices by the subsystem and random testing of the subsystem by the 
master system provide verification and independent self-checking. 
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